$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft File: A7133A09AC078B101CB7980FE646810280C0D64F.mft (raw, json) Hash identifier: 5V4kAA0iqcG1T5eBSxqbnYGjtd9fAsCYwrhPDITXGpY= Subject key identifier: AF:31:56:E5:6A:20:18:50:7E:BC:CA:9C:81:D6:06:82:59:84:5B:86 Authority key identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F Certificate issuer: /CN=A7133A09AC078B101CB7980FE646810280C0D64F Certificate serial: 2CBED0D1E54E17D976C6E349AA0A2D4B349DD439 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft Manifest number: 85 Signing time: Sun 26 Jul 2026 15:31:55 +0000 Manifest this update: Sun 26 Jul 2026 15:26:55 +0000 Manifest next update: Mon 27 Jul 2026 18:08:55 +0000 Files and hashes: 1: 3131382e3234322e302e302f31362d3136203d3e2030.roa (hash: mUk74oXYFU6Ae6TtZNwjm0VOpRcUFRFOOIDC/sj+JZU=) 2: 3131382e3234322e32342e302f32322d3232203d3e2034383132.roa (hash: NcYkM98RLbkSlZKIJVkf0b8tgMhZh0eBBgVWrZHmpIE=) 3: 3131382e3234322e31362e302f32322d3232203d3e2034383132.roa (hash: Wg6c56nIiryoYb5Qqfo2U52K9I6Dt+EF0h4NcPIMpRg=) 4: A7133A09AC078B101CB7980FE646810280C0D64F.crl (hash: iS+8vHdhASC0G0YXGI6w1HTlW31/rhKLJQNldA+gcgk=) 5: 3131382e3234322e302e302f32322d3232203d3e2034383132.roa (hash: 58I4ydCCcF9hQm4ALM8HdXPHeUsscGP0Ad1DVSViNOs=) 6: 3131382e3234322e33322e302f32322d3232203d3e2034383132.roa (hash: eqKYssRjmbT+n2crq/yxbZNVr33UQZ6vHSKYThAYbGw=) 7: 3131382e3234322e34302e302f32342d3234203d3e2034383132.roa (hash: YuFq6zn2fxeE5ra6cdH7TfbmzrsmrMPSofOx9YtBqUQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 18:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:be:d0:d1:e5:4e:17:d9:76:c6:e3:49:aa:0a:2d:4b:34:9d:d4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7133A09AC078B101CB7980FE646810280C0D64F Validity Not Before: Jul 26 15:26:55 2026 GMT Not After : Jul 27 18:08:55 2026 GMT Subject: CN=AF3156E56A2018507EBCCA9C81D6068259845B86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:33:d6:2a:5e:b6:c9:a1:4a:f8:b6:31:4f: c1:33:c9:56:08:b2:dd:31:82:a5:fc:ef:dc:37:6d: 09:5b:e4:a7:fc:cf:36:a9:1a:20:06:44:9c:87:41: 23:6b:36:5c:07:b5:2e:6c:e9:66:ef:b4:e3:d6:09: 7a:ab:63:b2:e1:07:7e:4d:14:99:6a:09:5e:67:fc: 76:bf:68:13:6b:35:52:5e:f2:3b:96:bd:76:58:8d: a1:b6:e8:68:72:e7:35:01:c4:70:39:d2:1c:41:9c: 57:cb:b5:9a:7f:4e:23:bf:18:bb:5e:aa:aa:7b:d3: a8:06:11:44:d5:c8:03:27:15:20:70:54:35:60:a8: 9f:74:07:72:5b:93:58:8c:3c:e7:6e:50:6e:c3:2f: 42:0b:b8:51:34:2a:48:c0:82:14:4b:c8:85:9c:59: a8:75:aa:46:12:d5:28:4f:f2:dd:57:3c:39:c2:38: fd:74:a9:7f:14:53:d8:14:1e:25:54:28:a6:82:47: 2b:c5:c0:f9:19:51:9d:7b:b8:c6:2b:90:08:3c:f8: f5:bb:4f:de:54:7f:95:5a:36:9e:fd:5a:fe:0a:2b: 63:6b:69:c6:ed:2e:0b:8b:17:b4:62:88:91:f2:7c: b9:21:17:8e:26:47:81:83:4f:f8:31:5b:1f:70:e5: c6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:31:56:E5:6A:20:18:50:7E:BC:CA:9C:81:D6:06:82:59:84:5B:86 X509v3 Authority Key Identifier: keyid:A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9d:2a:5d:f0:3b:90:ba:1e:1e:55:cb:45:f8:cb:66:58:a1: 4f:f2:16:13:ce:23:8a:34:4a:0a:d9:df:aa:06:8f:fe:77:58: a2:43:33:08:f7:ae:32:cd:19:45:ca:ca:d9:02:b9:fa:f2:2d: 5d:7a:85:7c:34:21:15:b2:ea:ae:4b:23:0e:5d:b8:52:f5:7d: 7c:38:94:2d:72:07:bf:3d:f0:05:53:1a:cd:c4:d4:7c:40:5f: fb:82:b2:db:8c:03:aa:f7:e7:aa:65:fd:c5:fa:3e:b3:8f:f0: 6b:48:3e:c5:9d:e6:f1:18:1b:8e:b5:39:5b:74:fc:cd:ac:f4: 91:1b:57:ae:47:03:c9:4e:db:01:c7:d4:fe:c2:b0:ba:d3:75: e2:21:11:b0:0c:af:6a:4e:22:4b:b2:7e:02:ee:f0:ec:58:eb: 1d:71:68:75:90:e9:cb:07:e4:73:7e:39:f6:7e:a6:81:4a:16: cf:88:13:7b:0c:b7:d7:93:86:87:e7:a6:2e:f4:f7:dd:2a:c6: 5c:72:a3:0d:fe:98:8d:ed:23:e2:7e:18:94:25:74:86:5d:5c: 33:cf:9d:ae:b4:4d:8c:43:63:82:b6:76:14:30:3c:66:97:44: 2d:98:33:7b:dc:b3:2a:16:0f:b9:b2:10:6a:55:6a:e1:ef:17: 97:9a:2f:d1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULL7Q0eVOF9l2xuNJqgotSzSd1DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4 MEMwRDY0RjAeFw0yNjA3MjYxNTI2NTVaFw0yNjA3MjcxODA4NTVaMDMxMTAvBgNV BAMTKEFGMzE1NkU1NkEyMDE4NTA3RUJDQ0E5QzgxRDYwNjgyNTk4NDVCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVzPWKl62yaFK+LYxT8EzyVYI st0xgqX879w3bQlb5Kf8zzapGiAGRJyHQSNrNlwHtS5s6WbvtOPWCXqrY7LhB35N FJlqCV5n/Ha/aBNrNVJe8juWvXZYjaG26Ghy5zUBxHA50hxBnFfLtZp/TiO/GLte qqp706gGEUTVyAMnFSBwVDVgqJ90B3Jbk1iMPOduUG7DL0ILuFE0KkjAghRLyIWc Wah1qkYS1ShP8t1XPDnCOP10qX8UU9gUHiVUKKaCRyvFwPkZUZ17uMYrkAg8+PW7 T95Uf5VaNp79Wv4KK2NracbtLguLF7RiiJHyfLkhF44mR4GDT/gxWx9w5cYtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrzFW5WogGFB+vMqcgdYGglmEW4YwHwYDVR0j BBgwFoAUpxM6CawHixAct5gP5kaBAoDA1k8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODk4ODQ4OTQ2NDA4NjUzMC8wL0E3MTMzQTA5QUMwNzhCMTAxQ0I3OTgwRkU2NDY4 MTAyODBDMEQ2NEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4MEMwRDY0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg5ODg0ODk0NjQwODY1MzAvMC9BNzEzM0EwOUFDMDc4 QjEwMUNCNzk4MEZFNjQ2ODEwMjgwQzBENjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbp0qXfA7kLoe HlXLRfjLZlihT/IWE84jijRKCtnfqgaP/ndYokMzCPeuMs0ZRcrK2QK5+vItXXqF fDQhFbLqrksjDl24UvV9fDiULXIHvz3wBVMazcTUfEBf+4Ky24wDqvfnqmX9xfo+ s4/wa0g+xZ3m8RgbjrU5W3T8zaz0kRtXrkcDyU7bAcfU/sKwutN14iERsAyvak4i S7J+Au7w7FjrHXFodZDpywfkc3459n6mgUoWz4gTewy315OGh+emLvT33SrGXHKj Df6Yje0j4n4YlCV0hl1cM8+drrRNjENjgrZ2FDA8ZpdELZgze9yzKhYPubIQalVq 4e8Xl5ov0Q== -----END CERTIFICATE-----Generated at Mon Jul 27 06:53:59 2026 by rpki-client